Senior DevSecOps Engineer

This is a fully remote position, open to applicants in Ukraine, +1 more country.

📋 Description

• Initiate, oversee, and evaluate scans across code, dependencies, containers, and Infrastructure as Code (IaC).

• Assess findings and prioritize them based on actual risk rather than solely on CVSS scores.

• Independently address vulnerabilities by updating dependencies, applying patches, enhancing Docker/Kubernetes/IaC configurations, and generating repository pull requests.

• Collaborate with development teams to coordinate complex fixes.

• Track SLA compliance and confirm remediation through re-scanning.

• Manage and maintain integrated Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Secret Scanning tools.

• Handle security alerts and investigate false positives.

• Review logs and collaborate with existing SIEM/Wazuh rules.

• Escalate incidents to the Security Operations Center (SOC) as necessary.

• Adjust existing Web Application Firewall (WAF)/Cloudflare rules in accordance with established procedures.

⛳️ Requirements

• Practical experience in vulnerability management.

• Familiarity with vulnerability scanners such as Trivy, Snyk, SonarQube, Semgrep, OWASP ZAP, and Gitleaks, along with an understanding of their functionalities.

• Effective remediation skills, including updating packages, modifying Dockerfiles, altering Terraform/Helm, and creating basic code pull requests.

• Competence in creating basic code pull requests in Python, JavaScript, or another programming language.

• Proficiency in Bash and Python for automating routine tasks and interfacing with scanner APIs.

• Hands-on experience with Docker and Kubernetes.

• Knowledge of CI/CD pipelines such as GitLab CI, GitHub Actions, or Jenkins.

• Fundamental understanding of cloud infrastructure and networking, including AWS/GCP/Azure, IAM, TLS, DNS, network segmentation, and firewall principles.

• Excellent communication skills for task assignment, explaining the significance of findings, and justifying remediation efforts.

• Experience with Vault, SIEM, Cloudflare WAF/rate limiting, and OWASP Top 10 is an advantage, though not mandatory.

🏝️ Benefits

• Reimbursement for external courses and conferences.

• Access to the corporate library.

• Flexible work schedule with start times available between 8:00–11:00 Kyiv time.

• Option to work from the Kyiv office, coworking spaces in Lviv or Warsaw, or fully remote.

• 28 paid vacation days per year.

• Up to 30 days of sick leave with medical documentation.

• All public holidays off.

• Medical insurance coverage.

• Reimbursement for psychological counseling sessions.

• Participation in the Ukrainian Victory Support program and other social initiatives.

• Regular online or offline team-building events.